WO2019157934A1

WO2019157934A1 - Network access method and related apparatus

Info

Publication number: WO2019157934A1
Application number: PCT/CN2019/073366
Authority: WO
Inventors: 诸华林; 靳维生
Original assignee: 华为技术有限公司
Priority date: 2018-02-14
Filing date: 2019-01-28
Publication date: 2019-08-22
Also published as: EP3726887A1; CN110167102B; EP3726887B1; CN110167102A; US20200374827A1; US11297587B2; EP3726887A4

Abstract

Disclosed in embodiments of the present application is a network access method, for use in limiting a network access range of a terminal device, so as to satisfy the requirement of limiting the terminal device within a specified range. The method in the embodiments of the present application comprises: an access management network element receives information about an access area of the terminal device; the access management network element obtains information about an access-allowed area of the terminal device; the access management network element determines, according to the information about the access area of the terminal device and the information about the access-allowed area of the terminal device, whether to allow the access of the terminal device.

Description

Network access method and related device

The present application claims priority to Chinese Patent Application No. 20110115155.7, filed on February 14, 2018, the entire disclosure of which is incorporated herein by reference. In this application.

Technical field

The present application relates to the field of network communication technologies, and in particular, to a network access method and related device.

Background technique

With the development of network technology, the network has become a part of people's lives, bringing great convenience to people's lives. In order to meet the needs of people using the network, many places provide wireless network (such as wifi) access points, which facilitate users to access the wifi access point and access the Internet.

At the same time as the network brings convenience, there is also a new demand for network access. For example, for a service requirement, terminal equipment within a specified range is restricted in network access, so that the terminal device can only be within a specified range. Accessing the network device through the access network device to perform related services. For example, a terminal device with a specific service function can access a network for a specific service only within a specified range such as a home or an office building. Therefore, based on the foregoing service requirements, the present application proposes a new method for limiting the access range of a terminal device to meet the requirement that the terminal device can only access the network within a specified range.

Summary of the invention

The present application provides a method for network access, which is used to limit the network access range of a terminal device to meet the requirement of limiting the terminal device within a specified range.

In view of this, in a first aspect, the present application provides a method for network access, including: receiving, by an access management network element, information of an access area of a terminal device;

Obtaining, by the access management network element, the information that allows the access area of the terminal device;

The access management network element determines whether to allow the terminal device to access according to the information about the access area of the terminal device and the information of the access area of the terminal device.

As can be seen from the above technical solutions, the present application has the following advantages:

The access management network element determines whether the access of the terminal device can be accessed through the information of the access area of the terminal device and the information of the access area allowed by the terminal device, thereby the access management network element can connect the terminal device. The inbound area is restricted to the allowed access area, so that the terminal device cannot access the network within the range of the allowed access area. It can be understood that the range of the allowed access area is controllable by the access management network. The access management network element can control the access area to be within the preset range according to the requirements of the related service, so as to meet the requirement that the terminal device can only access the network within the specified range and further perform related services.

In a possible implementation manner of the first aspect of the present application, the access management network element receives the information about the access area of the terminal device, where the access management network element receives the information sent by the access network element The information about the access area of the terminal device, where the information about the access area of the terminal device includes: at least one of information about a current access area of the terminal device and information of an adjacent area of the current access area of the terminal device. Or the access management network element receives the information about the current access area of the terminal device sent by the access network element, and the access management network element receives the terminal sent by the topology management network element. Information about the adjacent area of the device's current access area.

In a possible implementation manner of the first aspect of the present application, the access management network element acquires the information about the access area of the terminal device, including: the access management network element to the information The network element sends a request message to obtain the information about the access area of the terminal device, where the information providing network element includes: a unified device management network element or a policy control network element or an authentication service network element.

In a possible implementation manner of the first aspect of the application, the access management network element determines whether to allow the terminal according to the information about the terminal device access area and the information that allows the terminal device access area The accessing of the device includes: determining, by the access management network element, whether the information of the access area of the terminal device is allowed to include all or part of the information about the access area of the terminal device, whether the terminal is allowed to access; If yes, the access management network element allows the terminal device to access; if not, the access management network element rejects the terminal device access.

In a possible implementation manner of the first aspect of the application, the access management network element determines whether to allow the terminal according to the information about the terminal device access area and the information that allows the terminal device access area The access of the device includes: the access management network element identifying the verification information of the access area of the terminal device and the authentication information of the access area of the terminal device are matched; if the matching, the access management network element The terminal device is allowed to access; if not, the access management network element denies the terminal device from accessing.

In a possible implementation manner of the first aspect of the application, the method further includes: if the access management network element identifies, in the registration process, information about the access area of the terminal device, including all or part of Allowing the terminal device to access the information of the area, the access management network element allows the terminal device to register; otherwise, the access management network element rejects the terminal device registration or denies the terminal device to establish a session connection. .

In a possible implementation manner of the first aspect of the application, the method further includes: if the access management network element identifies, in the handover process, information about the access area of the terminal device, including all or part of Allowing the terminal device to access the information of the area, the access management network element allows the terminal device to perform the handover; otherwise, the access management network element rejects the terminal device to perform the handover, or The device initiates a registration process, or initiates a session deletion process to the terminal device.

In a possible implementation manner of the first aspect of the application, the method further includes: if the access management network element identifies the information about the access area of the terminal device in the session establishment process, including all or part of The access management network element allows the terminal device to establish a session connection, and the access management network element rejects the terminal device to establish a session connection, or The terminal device initiates a deregistration process, or initiates a session deletion process to the terminal device.

In a second aspect, the application provides a method for network access, including:

The access network element learns that the terminal device can only access the access area;

The access network element sends information about the access area of the terminal device to the access management network element.

From the above technical solutions, it can be seen that the present application has the following advantages:

After the access network element learns that the terminal device can only access the access area, the access network element sends the information about the access area of the terminal device to the access management network element, so that the access management network element learns After the terminal device allows access to the area, the access management network element restricts the terminal device to the access device in the access device, and implements the restriction on the access region of the terminal device.

With reference to the second aspect of the present application, in a first possible implementation manner of the second aspect of the application, the access network element learns that the terminal device can only access the access area, including: The network access network element receives the access restriction identifier sent by the terminal device, and learns that the terminal device can only access the access area, or the access network network element sends the information through the access management network element. The indication message is that the terminal device can only access the access area, and the indication message is used to indicate that the network element of the access network sends the information about the access area of the terminal device to the access management network element. .

With reference to the second aspect of the present application or the first possible implementation manner of the second aspect, in a second possible implementation manner of the second aspect of the application, the access network element to the access management network element And the information about the access area of the terminal device is sent by the network element of the access network to the access management network element, where the information about the access area of the terminal device includes: The information about the current access area of the terminal device and the information of the neighboring area of the current access area of the terminal device, or the access network element sends only the current access of the terminal device to the access management network element. Regional information.

In a third aspect, the application provides a method for network access, including:

The terminal device determines that the terminal device can only access the access area;

The terminal device sends the indication information to the network element of the access network, where the indication information is used to indicate that the network element of the access network sends the information about the access area of the terminal device to the access management network element.

After the terminal device determines that the terminal device can only access the network in the allowed access area, the terminal device sends the indication information to the access network element to trigger the access network element to send the terminal device access area to the access management network element. After the access management network element learns the terminal device access area, and determines the terminal device access area to determine whether it is within the allowed access area, the access management network element limits the terminal device to the terminal. The device allows access in the access area to limit the access area of the terminal device.

With reference to the third aspect of the present application, in a first possible implementation manner of the third aspect of the present application, the terminal device determines that the terminal device can only access the access area, including: the terminal device Determining that the terminal device can only access the access area according to the device type of the terminal device, or determining that the terminal device can only be connected in the allowed access area according to the subscription information of the terminal device. In.

In a fourth aspect, the application provides a method for network access, including:

The information providing network element acquires information about the access area allowed by the terminal device;

The information providing network element sends the information about the access area of the terminal device to the access management network element.

After the information providing network element learns that the terminal device can only access the access area, the information providing network element sends the information of the access area allowed by the terminal device to the access management network element, so that the access management network element learns the terminal device. After the access zone is allowed to be accessed, the access management network element restricts the terminal device to the access zone of the terminal device, thereby limiting the access zone of the terminal device.

With reference to the fourth aspect of the present application, in a first possible implementation manner of the fourth aspect of the present application, the information providing network element acquires information about an access area allowed by the terminal device, including: the information providing network element according to The subscription information of the terminal device determines the information that allows the terminal device to access the area.

With reference to the fourth aspect of the present application or the first possible implementation manner of the fourth aspect, in a second possible implementation manner of the fourth aspect of the application, the information providing network element sends the information to the access management network element. The information that allows the terminal device to access the area includes: after the information providing network element receives the request message sent by the access management network element, the information providing network element sends the information to the access management network The element sends the message that allows the terminal device to access the area.

The information about the terminal device access area in any one of the foregoing first to fourth aspects includes: an identifier of the terminal device access area, where the terminal device accesses an adjacent area of the area And identifying at least one of verification information of the terminal device access area. The information that allows the terminal device to access the area includes at least one of an identifier that allows the terminal device to access the area and authentication information that allows the terminal device to access the area. The identifier of the terminal device access area includes: an identifier of the access cell, an identifier of the access network device, an interface line identifier, a virtual local area network identifier, and a port identifier; and the adjacent area of the terminal equipment access area The identifier of the neighboring cell of the access cell or the identifier of the neighboring access network device of the access network device.

Therefore, the implementation method of the present application may be that the allowed access area of the terminal device may be one or more access cells. Therefore, the network access method may limit the allowed access range of the terminal device to one or more cell ranges. The access management network element limits the allowed access area of the terminal device to the cell granularity range.

In a fifth aspect, an embodiment of the present application provides an access management network element, where the access management network element has the function of implementing an access management network element in the foregoing method embodiment. This function can be implemented in hardware or in hardware by executing the corresponding software. The hardware or software includes one or more modules corresponding to the functions described above.

In a sixth aspect, an embodiment of the present application provides an access network element, where the access network element has a function of implementing an access network element in the foregoing method embodiment. This function can be implemented in hardware or in hardware by executing the corresponding software. The hardware or software includes one or more modules corresponding to the functions described above.

In a seventh aspect, the embodiment of the present application provides an information providing network element, where the information providing network element has the function of implementing the information providing network element in the foregoing method embodiment. This function can be implemented in hardware or in hardware by executing the corresponding software. The hardware or software includes one or more modules corresponding to the functions described above.

In an eighth aspect, the embodiment of the present application provides a terminal device, where the terminal device has the function of implementing the terminal device in the foregoing method embodiment. This function can be implemented in hardware or in hardware by executing the corresponding software. The hardware or software includes one or more modules corresponding to the functions described above.

In a ninth aspect, the embodiment of the present application provides a communication apparatus, where the communication apparatus includes a storage element and a processing element, and the storage element is configured to execute the computer operation instruction by using the computer operation instruction, The access management network element, the access network element in the second aspect, the terminal device in the third aspect, and the network access method corresponding to any one of the information providing network elements in the fourth aspect.

Optionally, the storage element includes: a memory or a chip having a storage function, and the processing element includes: a processor or a chip with processing capability.

The above memory may be a read-only memory (ROM) or other type of static storage device that can store static information and instructions, a random access memory (RAM) or a device that can store information and instructions. Other types of dynamic storage devices may also be electrically erasable programmable read-only memory (EEPROM), compact disc read-only memory (CD-ROM) or other optical disc storage. Optical disc storage (including compact discs, laser discs, optical discs, digital versatile discs, Blu-ray discs, etc.), magnetic disk storage media or other magnetic storage devices, or capable of carrying or storing desired program code in the form of instructions or data structures and capable of Any other medium accessed by a computer, but is not limited thereto. The memory can exist independently and be connected to the processor via a bus. The memory can also be integrated with the processor.

The processor may be a general purpose central processing unit (CPU), a microprocessor, an application-specific integrated circuit (ASIC), or one or more for controlling the execution of the program of the present application. integrated circuit.

In a tenth aspect, the embodiment of the present application provides a computer storage medium, which is used for storing the access management network element in the foregoing first aspect, the access network element in the second aspect, the terminal device in the third aspect, and the fourth In the aspect, the information provides computer software instructions for use by the device in the network element, and when executed on the computer, causes the computer to perform the method of network access of any of the above first to fourth aspects.

In an eleventh aspect, the embodiment of the present application provides a computer program product including instructions, which when executed on a computer, enable the computer to perform the network access method of any one of the foregoing first to fourth aspects .

DRAWINGS

1 is a schematic diagram of a network access method in an embodiment of the present application;

2 is a schematic diagram of an embodiment of a network access method in an embodiment of the present application;

FIG. 3 is a schematic diagram of another embodiment of a network access method according to an embodiment of the present application;

4 is a schematic diagram of another embodiment of a network access method according to an embodiment of the present application;

FIG. 5 is a schematic diagram of another embodiment of a network access method according to an embodiment of the present application;

FIG. 6 is a schematic diagram of another embodiment of a network access method according to an embodiment of the present application;

FIG. 7 is a schematic diagram of another embodiment of a network access method according to an embodiment of the present application;

FIG. 8 is a schematic diagram of a signing manner of a network access method according to an embodiment of the present application;

FIG. 9 is a schematic diagram of another signing manner of a network access method according to an embodiment of the present application;

FIG. 10 is a schematic diagram of another signing manner of a network access method according to an embodiment of the present application;

FIG. 11 is a schematic diagram of another signing manner of a network access method according to an embodiment of the present application;

FIG. 12 is a schematic diagram of an embodiment of an access management apparatus according to an embodiment of the present application;

FIG. 13 is a schematic diagram of another embodiment of an access management apparatus according to an embodiment of the present application;

FIG. 14 is a schematic diagram of an embodiment of an access device according to an embodiment of the present application;

FIG. 15 is a schematic diagram of another embodiment of an access device according to an embodiment of the present application;

FIG. 16 is a schematic diagram of an embodiment of a terminal device according to an embodiment of the present application;

FIG. 17 is a schematic diagram of an embodiment of an information providing apparatus according to an embodiment of the present application;

FIG. 18 is a schematic diagram of an embodiment of a communication device according to an embodiment of the present application.

Detailed ways

The technical solutions in the present application are clearly and completely described in the following with reference to the drawings in the embodiments of the present application. It is obvious that the described embodiments are only a part of the embodiments of the present application, and not all of the embodiments.

The terms "first", "second", "third", "fourth", etc. (if present) in the specification and claims of the present application and the above figures are used to distinguish similar objects without having to use To describe a specific order or order. It is to be understood that the data so used is interchangeable so that the embodiments described herein can be implemented in a sequence other than what is illustrated or described herein. In addition, the terms "comprises" and "comprises" and "the" and "the" are intended to cover a non-exclusive inclusion, for example, a process, method, system, product, or device that comprises a series of steps or units is not necessarily limited to Those steps or units may include other steps or units not explicitly listed or inherent to such processes, methods, products or devices.

The network access method in the embodiment of the present application may be applied to a communication network: a global system of mobile communication (GSM), a code division multiple access (CDMA) system, and a wideband code division multiple access. (wideband code division multiple access wireless, WCDMA) system, general packet radio service (GPRS) system, universal mobile telecommunications system (UMTS), LTE system and its evolution system, new generation wireless ( New radio, NR) communication system, MulteFire network or home base station network, non-3rd Generation Partnership Project (N3GPP) (such as WIFI) access mobile network, fixed wireless access , FWA) network, fixed access network, subsequent evolved access network, etc.

Before introducing a specific embodiment, some concepts such as a base station, a cell, and a terminal device involved in the present application are briefly described.

The network device in the embodiment of the present application may be a long term evolution (LTE) system or an evolved base station (evolutional Node B) in an authorized auxiliary access-long term evolution (LAA-LTE) system. , referred to as eNB or e-NodeB), macro base station, micro base station (also referred to as "small base station"), pico base station, access point (AP) or transmission point (TP), or a new generation Base station (new generation Node B, gNodeB), fixed network access network (Wireline Access Network).

The cell mentioned in the embodiment of the present application may be a cell corresponding to the base station. The cell may belong to a macro base station, or may belong to a base station corresponding to a small cell. The small cell here may include: a metro cell, a micro cell, a pico cell, a femto cell, etc., and the small cell has a small coverage and a low transmission power. Suitable for providing high-speed data transmission services.

The terminal device in the embodiment of the present application may be referred to as a user equipment (UE), a mobile station (MS), a mobile terminal (mobile terminal) intelligent terminal, etc., and the terminal device may be connected to the radio access network ( The radio access network (RAN) communicates with one or more core networks. For example, the terminal device may be a mobile phone (or "cellular" phone), a computer, a home gateway, a fixed network terminal, etc., and the terminal device may also be a portable, pocket, handheld, computer built-in or vehicle-mounted mobile device and Terminal equipment in the future 5G network.

The access management device in the embodiment of the present application may be used for access management or session management of the terminal, and may be an access management function (AMF) network element of the mobile network or a session management function (Session). Management Function, SMF) Network element.

FIG. 1 is a schematic diagram of a network access method in the embodiment of the present application. In FIG. 1, a total of 13 access areas are shown, which are sequentially labeled as 1-13, where the area labeled 1-3 is a terminal. The three subscription areas that the equipment subscribes to are the areas that allow the terminal equipment to access; the areas labeled 4-13 are the adjacent areas of the above-mentioned number 1-3 access areas. When the access area reported by the terminal device is in the three subscription areas of the foregoing labels 1-3, the terminal device is allowed to access the network; otherwise, the terminal device is denied access to the network. Due to the change in the signal state of the terminal device, the terminal device may switch to the adjacent area (in the area labeled 4-13), but the actual position of the terminal device does not change. Therefore, in this case, the terminal device should be allowed to continue to access the network, that is, the terminal device access area may be allowed to include the neighboring area of the above-mentioned contracted area.

In order to facilitate the understanding of the method for network access in the embodiment of the present application, the method for network access in this application is described in detail below with reference to specific embodiments, as follows:

As shown in FIG. 2, an embodiment of a network access method in the embodiment of the present application includes:

201. The access management network element receives information about a terminal device access area.

The information about the terminal device access area includes at least one of an identifier of the terminal device access area, an identifier of the adjacent area of the terminal device access area, and an authentication message of the terminal device access area. Further, the identifier of the access area of the terminal device may be any one of an identifier of the access cell, an interface line identifier, a virtual local area network identifier, a port identifier, and an identifier of the access network device. In this case, the corresponding terminal device is connected. The identifier of the neighboring area of the ingress area may be an identifier of a neighboring cell of the access cell or an identifier of a nearby access network device of the access network device.

It should be noted that the access network device may be a mobile network access network element or a fixed network access network element. The verification message of the access area of the terminal device may be an account password, or other types of verification messages, such as a short message verification password or an image verification password, and the present application does not impose any limitation.

When the access network element is a mobile network access network element, the identifier of the terminal access area may be the cell identifier of the current access cell or the identifier of the mobile network access network. When the access network element is a network element of the fixed network access network, the identifier of the access area of the terminal device may be any one of the current interface line identifier, the virtual local area network identifier, the port identifier, and the identifier of the fixed network access network.

The access management network may obtain information about the access area of the terminal device from the network element of the access network, or obtain the message from other network elements that store information of the access area of the terminal device.

202. The access management network element acquires information that allows the terminal device to access the area.

The information of the access area that allows the terminal device to access the area refers to the information of the access area that the access management network element allows the terminal device to access, for example, the information of the access area labeled 1-3 shown in FIG. 1 above (eg, Logo, etc.). The description of the information about the access area of the terminal device is similar to the description of the information of the access area of the terminal device in the above step 201, and details are not described herein again.

The access management network element may obtain information that allows the terminal device to access the area from the information providing network element. The information providing network element may be a unified data management (UDM) network element, or a policy control function (PCF) network element, or an authentication service function (AUSF) network element. One of the network elements, wherein the authentication service network element can also be called an authentication network element.

203. The access management network element determines, according to the information about the access area of the terminal device and the information of the access area of the terminal device, whether to allow the terminal device to access.

If yes, the access management network element allows the terminal device to access. In this case, specifically, if the network access method is used in the registration process of the terminal device, the access management network element allows the terminal device to perform registration. The access management network element allows the terminal device to perform handover if the network access method is used in the access area handover process of the terminal device. The access management network element allows the terminal device to perform session establishment if the network access method is used in the access area handover process of the terminal device.

If not, the access management network element denies access to the terminal device. In this case, specifically, if the network access method is used in the registration process of the terminal device, the access management network element denies the terminal device to register or rejects the terminal device to establish a session connection. If the network access method is used in the access area switching process of the terminal device, the access management network element rejects the terminal device to perform the handover, or initiates a deregistration process to the terminal device, or initiates a session deletion process to the terminal device. If the network access method is used in the access area switching process of the terminal device, the access management network element rejects the terminal device to establish a session connection, or initiates a deregistration process to the terminal device, or The device initiates a session deletion process. In addition, the access management network element may also determine whether the verification message of the access area of the terminal device matches the verification message of the access area of the terminal device.

When the network access method is used in the registration process, the access management network element determines whether the verification message of the access area of the terminal device matches the verification message of the access area of the terminal device, and if it matches, the access management network element allows the terminal. The device is registered. If there is no match, the terminal device is rejected for registration or the terminal device is denied to establish a session connection.

When the network access method is used in the process of the access area switching, the access management network element determines whether the verification message of the access area of the terminal device matches the verification message of the access area of the terminal device, and if it matches, the access management network The meta allows the terminal device to perform the handover. If it does not match, the terminal device is refused to perform the handover, or the de-registration process is initiated to the terminal device, or the session deletion process is initiated to the terminal device.

When the network access method is used in the session connection process, the access management network element determines whether the verification message of the access area of the terminal device matches the verification message of the access area of the terminal device, and if it matches, the access management network element allows The terminal device establishes a session connection. If there is no match, the access management network element rejects the terminal device to establish a session connection, or initiates a deregistration process to the terminal device, or initiates a session deletion process to the terminal device. It should be noted that the session establishment process may be a packet data unit (PDU) session establishment process or a service request service request process.

The above matching can be understood as the verification message of the access area of the terminal device is the same as the verification message of the access area of the terminal device, or can be understood as the verification message of the access area of the terminal device and the verification of the access area of the terminal device. The preset correspondence is satisfied.

In the embodiment of the present application, the information of the access device of the terminal device may be any one of an identifier of the access cell, an identifier of the access network device, an interface line identifier, a virtual local area network identifier, and a port identifier. The incoming area is in the range of one or more cells, and the cell range is a small range. For example, the signal of one cell covers an office building or a room. Therefore, the network access method in the embodiment of the present application can narrow the terminal device. The scope of the restricted area to meet the limit of terminal equipment can only limit the need to access the network within a small range.

It should be noted that the cell in the present application as described above may be a small cell, such as a metro cell, a micro cell, a pico cell, a femto cell, or the like. Moreover, these small cells have the characteristics of small coverage and low transmission power, and are suitable for providing high-speed data transmission services. Therefore, the network access method in the embodiment of the present application can better satisfy the foregoing function of limiting the terminal device to perform a specific service in a small area.

As described above, the terminal device access area may be the coverage of one or more cells (or small cells). It may be understood that the cell identifier or the small cell identifier is a commonly used flag for identifying and distinguishing different cells or small cells. At this time, the access management network element can judge the terminal device accessing the network according to the cell identifier. The following is a detailed description of the network access method in the embodiment of the present application, as follows: As shown in FIG. 3, an embodiment of the network access method in the embodiment of the present application includes:

301. The terminal device sends indication information to the access network element.

During the registration process of the terminal device, the terminal device sends registration information to the access network, where the registration information is used to request the registration process of the terminal device to enable the terminal device to access the network. The indication information carries the indication information, where the indication information is used to indicate that the terminal device is a terminal whose access range is restricted, and the terminal device can only access the cell corresponding to the information of the access allowed area.

The cell corresponding to the information of the access area is allowed to access the cell, and the allowed cell is required to meet the requirement that the terminal device can only perform related services in a small range, and the terminal device and the agreed terminal device are allowed to access. Community. When the terminal device is not within the coverage of the signal allowed to access the cell, the terminal device cannot access the network, that is, the network access range of the terminal device is limited by the allowed access to the cell. In addition, as shown in FIG. 1 , the terminal device may switch to a neighboring cell that allows access to the cell due to the decrease in the information strength of the terminal, but the actual location of the terminal device does not change. Therefore, in this case, the terminal device is also allowed to continue to access the network, and allowing the terminal device to access the cell may include the foregoing neighboring cell that allows access to the cell.

The foregoing indication information may be an access restriction indication, such as device type information, or other information having similar functions, and the application does not impose any limitation. It can be understood that if the device type indication information is not sent, the terminal device is not the terminal that is restricted by the access cell. Once the device type information is sent, it indicates that the device is a terminal with restricted cell access. In addition, the device type information may also include restricted cell device type information and access cell unrestricted device type information.

During the registration process of the terminal device, the foregoing indication information may also be sent in the registration information, and may be sent separately or carried in other interaction information in the registration process.

It should be noted that the information providing network element in this embodiment and other embodiments of the present application may be a unified data management network element or a policy control network element or an authentication network element, or may be other network elements having similar functions. There are no restrictions on this application.

302. The access network element sends the identifier of the current access cell and the identifier of the neighboring cell to the access management network element.

After the access management network element receives the indication information of the terminal device (such as the access restriction indication), the access network element sends the identifier of the current access cell to the access management network element and the neighboring cell of the currently accessed cell. Logo. The current access cell is determined by current location information of the terminal device. When the terminal device moves, the current access cell of the terminal device also changes.

The neighboring cell of the current access cell may refer to a cell that is adjacent to the current access cell in the location, or may refer to a cell in the neighbor cell relationship table of the current access cell, where the neighbor cell relationship table is used. In the neighboring relationship between the cell and the cell, if the cell A is located in the neighbor relationship table of the cell B, the cell A is the neighboring cell of the cell B, and if the cell B is located in the neighbor relationship table of the cell A, Then, the cell A and the cell B are mutually adjacent cells.

It is easy to understand that the access network element is the network device responsible for accessing the terminal device, and has the capability of knowing the current access cell and the neighboring cell of the terminal device. For details, refer to the introduction in the related materials. It will not be described in detail in the application.

303. The access management network element sends a request message to the information providing network element.

After the access management network element receives the identifier of the current access cell sent by the access network element, the access management network element learns that the terminal device is a terminal whose access range is restricted according to the access restriction identifier of the terminal device, The access management network element sends a request message to the information providing network element to obtain the cell information corresponding to the information of the allowed access area of the terminal device. Optionally, the information providing network element may provide geographic location or administrative location information to the access management network element, and the access management network element further maps the geographic location or administrative location information into corresponding cell information.

The information about the allowed access area of the terminal device recorded by the information providing network element is from the signing process of the terminal device and the information providing network element, and the specific signing process is described in the following FIG. 8 to FIG. Let me repeat.

304. The information providing network element returns an identifier of the allowed access cell to the access management network element.

After the information providing network element receives the request message sent by the access management network element, the information providing network element returns the identifier of the allowed access cell of the terminal device to the access management network element, so that the access management network element learns that the terminal device is received. Access restricted cell range.

305. The access management network element determines whether to allow the terminal device to register according to the identifier of the allowed access cell, the identifier of the currently accessed cell, and the identifier of the neighboring cell.

The access management network element determines whether one or more identifiers of the identifier of the current access cell and the identifier of the neighboring cell of the current access cell are the same as the identifier of the allowed access cell, and if yes, the access management network element allows The terminal device registers.

If none of the identifiers of the currently visited cell and the identifier of the neighboring cell of the currently visited cell are the same as the identifier of the allowed cell, the access management NE initiates a deregistration process of the terminal device, so that the terminal device cannot The neighboring cell that is currently accessing the cell or currently accessing the cell accesses the network.

It should be noted that the foregoing steps 301 to 305 describe a process in which the terminal device accesses the mobile network, such as a 5G mobile network. When the terminal device accesses the fixed network (the MulteFire network or the home base station network or the fixed access network), the cell identifier that identifies the restricted access range is replaced with the interface line identifier, the virtual local area network identifier, and the port identifier corresponding to the location of the terminal device. Any one of them can be described in detail here. For details, refer to the related description of FIG. 3 above.

In this embodiment, the access area of the terminal device is restricted to one or more allowed access cells, and the restricted area range of the terminal device can be effectively reduced, so that the terminal device can only access the network within a specified small range. To meet the needs of related businesses.

As shown in FIG. 4, another embodiment of the network access method in the embodiment of the present application includes:

401. The terminal device sends indication information to the access network element.

This step is similar to the foregoing step 301. For a detailed description, refer to the related description in the foregoing step 301, and details are not described herein again.

402. The access network element sends the identifier of the currently accessed cell to the access management network element.

The difference between the step and the step 302 is that the access network element sends only the identifier of the current access cell to the terminal device, but does not send the identifier of the neighboring cell of the current access cell. The related descriptions are similar to the related descriptions in the foregoing step 302. For reference, refer to the related description in the foregoing step 302, and details are not described herein again.

403. The access management network element sends a request message to the information providing network element.

This step is similar to the foregoing step 303. For a detailed description, refer to the related description in step 303 above, and details are not described herein again.

404. The information providing network element returns an identifier of the allowed access cell to the access management network element.

This step is similar to step 304 above. For a detailed description, refer to the related description in step 304 above, and details are not described herein again.

405. The access management network element sends an identifier of the allowed access cell to the topology management network element.

After the access management network element receives the identifier of the allowed access cell sent by the information providing network element, the access management network element sends the identifier of the allowed access cell to the topology management network element to obtain the neighboring cell that is allowed to access the cell. The identity of the cell.

It can be understood that, in this case, the information providing network element does not know the identity of the neighboring cell that is allowed to access the cell. Therefore, the access management network element needs to acquire the neighboring cell that allows access to the cell to the topology management network element. Logo.

406. The topology management network element sends an identifier of the neighboring cell that is allowed to access the cell to the access management network element.

After the topology management network element receives the identifier of the allowed access cell sent by the access management network element, the topology management network element returns the identifier of the neighboring cell that allows the access cell to the access management network element.

Similar to the current access cell, the neighboring cell that is allowed to access the cell may be a cell that is adjacent to the allowed access cell, or may be a cell that is allowed to access the cell neighbor relationship table. This application does not impose any restrictions.

The topology management network element is used to convert the location information into network element location information (such as cell information), which may be a network exposure function (NEF) network element or a service capability open function network element (service capability exposure). The function, SCEF) network element, or other network element having the above-mentioned conversion function, does not impose any limitation on this application.

407. The access management network element determines whether to allow the terminal device to register according to the identifier of the current access cell, the identifier of the allowed access cell, and the identifier of the neighboring cell.

The access management network element determines whether the identifier of the allowed access cell and the identifier of the neighboring cell that is allowed to access the cell are the same as the identifier of the current access cell, and if yes, the access management network element allows The terminal device registers.

If none of the identifiers of the allowed cell and the identity of the neighboring cell that is allowed to access the cell are the same as the identifier of the currently visited cell, the access management NE initiates a deregistration process of the terminal device, so that the terminal device cannot Accessing the network through the current access cell.

The beneficial effects in this embodiment are similar to those of the embodiment of FIG. 3 described above, and are not described herein again.

As shown in FIG. 5, another embodiment of the network access method in this embodiment of the present application includes:

501. The terminal device sends indication information to the access network element.

502. The access network element sends the identifier of the currently accessed cell to the access management network element.

503. The access management network element sends a request message to the information providing network element.

504. The information providing network element returns, to the access management network element, an identifier of the allowed access cell and an identifier of the neighboring cell.

The difference between the step and the foregoing step 304 is that the information providing network element further sends an identifier of the neighboring cell that allows access to the cell to the access management network element. The remaining related descriptions are similar to the related descriptions in the above steps 304 and 406, and are not described herein again.

505. The access management network element determines whether to allow the terminal device to register according to the identifier of the current access cell, the identifier of the allowed access cell, and the identifier of the neighboring cell.

This step is similar to the above step 407. For a detailed description, refer to the related description in step 407 above, and details are not described herein again.

The network access method described in the foregoing FIG. 3 to FIG. 5 is established on the basis that the terminal device learns that the device type is a terminal that restricts the access cell, and the network in the present application is not for the terminal device to predict the device type in advance. Another embodiment of the access method is shown in FIG. 6.

As shown in FIG. 6, another embodiment of the network access method in the embodiment of the present application includes:

601. The access management network element sends a request message to the information providing network element.

During the registration process of the terminal device, the access management network element sends a requesting cell to the information providing network element to obtain information about the allowed access area of the terminal device.

602. The information providing network element returns an identifier of the allowed access cell and an access restriction indication to the access management network element.

The information providing network element returns an identifier of the allowed access cell and an access restriction indication to the access management network element, where the access restriction indication is used to indicate that the terminal device is a terminal whose access range is restricted, so that the access management network element is informed The terminal device can only access the cell corresponding to the information of the allowed access area.

The cell corresponding to the information of the access area is allowed to access the cell, and the allowed cell is the terminal that meets the requirement that the terminal device can only perform related services in a small area, and the terminal device and the information providing network element agree on the terminal. The cell to which the device is connected. When the terminal device is not within the coverage of the signal allowed to access the cell, the terminal device cannot access the network, that is, the network access range of the terminal device is limited by the allowed access to the cell. In addition, as described in FIG. 1 , the terminal device may switch to a neighboring cell that allows access to the cell due to the decrease in the information strength of the terminal, but the actual location of the terminal device does not change. Therefore, in this case, the terminal device is also allowed to continue to access the network, and allowing the terminal device to access the cell may include the foregoing neighboring cell that allows access to the cell.

Optionally, the foregoing access restriction indication may be device type information, or other information having similar functions, and the application does not impose any limitation. It can be understood that if the device type indication information is not sent, the terminal device is not the terminal that is restricted by the access cell. Once the device type information is sent, it indicates that the device is a terminal with restricted cell access. In addition, the device type information may also include restricted cell device type information and access cell unrestricted device type information.

It can be understood that the access restriction indication may be in the information that the end user fills in the allowed access area during the contract with the network operator.

603. The access management network element sends an access restriction indication to the access network element.

After the access management network element learns that the terminal device is the terminal whose access range is restricted, the access management network element sends an access restriction indication of the terminal device to the access network element to obtain the current location of the terminal device. Community.

604. The access network element returns the identifier of the current access cell and the identifier of the neighboring cell to the access management network element.

After the access network element receives the access restriction indication of the terminal device sent by the access management network element, the access network element sends the identifier of the current access cell of the terminal device to the access management network element, and the current connection The identity of the neighboring cell entering the cell. The current access cell is transformed by the current location in the terminal device.

The neighboring cell of the current access cell may refer to a cell that is adjacent to the current access cell in the location, or may refer to a cell in the neighbor cell relationship table of the current access cell, where the neighbor relationship table For indicating the neighbor relationship between the cell and the cell, if the cell A is located in the neighbor relationship table of the cell B, the cell A is the neighboring cell of the cell B, and if the cell B is located in the neighbor relationship table of the cell A, Then, the cell A and the cell B are mutually adjacent cells.

605. The access management network element determines whether to allow the terminal device to register according to the identifier of the allowed access cell, the identifier of the currently accessed cell, and the identifier of the neighboring cell.

This step is similar to the foregoing step 305. For reference, refer to the related description in step 305 above, and details are not described herein again.

The network access method in the present application can be used not only in the foregoing registration process but also in the cell handover process of the terminal device. According to whether the switched cell is within the signal coverage of the same access network element, the handover may be divided into intra-base station handover or cross-base station handover.

It should be noted that, for a specific handover process, such as a series of handover operations performed by the A3 measurement report of the terminal device, refer to the description in other related materials, which is not described in detail in this application. The network access method in this application is also applicable to the cell handover process.

For intra-base station handover, after the access network element learns the target cell to be handed over by the terminal device, the access management network element needs to re-determine whether the target cell is allowed to access the cell or allow access to the cell. Within the range of the neighboring cell, if yes, the access management network element allows the terminal device to switch to the target cell; otherwise, the access management network element rejects the handover of the terminal device to the target cell. The specific judgment manner is similar to the foregoing embodiment in FIG. 3 to FIG. 6 , and details are not described herein again.

For cross-base station handover, the network access method in this application will be described with reference to FIG. 7.

As shown in FIG. 7, another embodiment of the network access method in the embodiment of the present application includes:

701. The original access management network element sends an access restriction indication to the target access management network element.

During the cross-base station handover process of the terminal device, the original access management network element learns the target access management network element corresponding to the target cell after the terminal device is switched. Here, the original access management network element is an access management network element corresponding to the original cell where the terminal device is switched before. In addition, the terminal device is a terminal whose access range is restricted. Therefore, during the handover process, the original access management network element sends an access restriction indication of the terminal device to the target access management network element, so that the target access management is performed. The network element learns that the access range of the terminal device is limited.

702. The target access management network element sends an access restriction indication to the target access network network element.

After the target access management network element learns that the terminal device is a terminal whose access range is restricted, the target access management network element sends an access restriction indication of the terminal device to the target access network network element to obtain the current current location of the terminal device. The cell corresponding to the location.

703. The target access network element returns the identifier of the target cell and the identifier of the neighboring cell to the target access management network element.

After the target access network element receives the access restriction indication of the terminal device that is sent by the target access management network element, the target access network element sends the identifier of the target cell that the terminal device requests to switch to the target access management network element, And the identity of the neighboring cell of its target cell.

704. The target access management network element sends a request message to the information providing network element.

After the target access management network element learns that the terminal device is a terminal whose access range is restricted, the target access management network element sends a request message to the information providing network element to obtain a cell corresponding to the information of the allowed access area of the terminal device. information.

The information about the allowed access area of the terminal device recorded by the information providing network element is from the signing process of the terminal device and the information providing network element, and the specific signing process is described in the following FIG. 8 to FIG. I won't go into details here.

705. The information providing network element returns an identifier of the allowed access cell to the target access management network element.

After the information providing network element receives the request message sent by the target access management network element, the information providing network element returns the identifier of the allowed access cell of the terminal device to the access management network element, so that the target access management network element learns the terminal. The range of cells in which the device is restricted by access.

706. The target access management network element determines whether to allow the terminal device to switch according to the identifier of the allowed access cell, the identifier of the target cell, and the identifier of the neighboring cell.

The target access management network element determines whether one or more identifiers of the identifier of the target cell and the identifier of the neighboring cell of the target cell are the same as the identifier of the allowed access cell, and if yes, the target access management network element allows the terminal device Switch to the target cell.

If none of the identifier of the target cell and the identifier of the neighboring cell of the target cell is the same as the identifier of the allowed cell, the target access management NE rejects the handover of the terminal device to the target cell, so that the terminal device cannot switch to the target. The cell, in turn, cannot perform operations such as network access through the target cell.

In this embodiment, for a terminal device with a restricted access range, the terminal device may be restricted to the coverage of the allowed access cell in the process of performing the cell handover in the terminal device, so as to ensure that the terminal device is always allowed to access. Within the coverage of the cell.

It should be noted that the network access method of the present application described in the foregoing embodiment corresponding to FIG. 2 is also applicable to the session establishment process of the terminal device, and the terminal device with restricted access scope can only be allowed to be connected. Establish a session within the cell range corresponding to the information of the inbound area to achieve the purpose of limiting the network access range of the terminal device.

The location information described in FIG. 3 to FIG. 7 above may be any one of latitude and longitude information, administrative location information, and address information, and is also started to be other location information that can reflect the restricted access range of the terminal device. This application does not impose any restrictions.

In addition to the foregoing embodiments corresponding to FIG. 3 to FIG. 7 , the present application further provides the following subscription mode corresponding to the network access method, so as to complete the subscription of the terminal device whose access range is restricted, as follows:

As shown in FIG. 8, a signing method of the network access method in this application includes:

801. The management system sends the location information and the terminal identifier of the terminal device to the information providing network element.

802. The information providing network element sends the location information of the terminal device to the topology management network element.

803. The topology management network element sends the identifier of the access cell to the information providing network element.

The topology management network element converts the location information of the terminal device to obtain the identifier of the allowed access cell of the terminal device, and sends the identifier of the allowed access cell to the information providing network element. Finally, the information providing network element stores the terminal identifier and the corresponding identifier of the allowed access cell.

As shown in FIG. 9, another signing method of the network access method in this application includes:

901. The management system sends the location information of the terminal device to the topology management network element.

902. The topology management network element sends an identifier of the allowed cell to the management system.

The topology management network element converts the location information of the terminal device to obtain the identifier of the allowed access cell of the terminal device, and sends the identifier of the allowed access cell to the management system.

903. The management system sends the identifier of the access cell and the terminal identifier to the information providing network element.

Finally, the information providing network element stores the terminal identifier and the corresponding identifier of the allowed access cell.

As shown in FIG. 10, another signing method of the network access method in this application includes:

1001. The management system sends the location information and the terminal identifier of the terminal device to the information providing network element.

1002. The information providing network element sends the location information of the terminal device to the topology management network element.

1003. The topology management network element sends the identifier of the access cell and the identifier of the neighboring cell to the information providing network element.

The topology management network element converts the location information of the terminal device to obtain the identifier of the allowed access cell of the terminal device and the identifier of the neighboring cell that is allowed to access the cell, and sends the two types of identifiers to the information providing network element. Finally, the information providing network element stores the terminal identifier and the above two types of identifiers of the terminal device.

As shown in FIG. 11, another signing method of the network access method in this application includes:

1101. The management system sends the location information of the terminal device to the topology management network element.

1102. The topology management network element sends the identifier of the access cell and the identifier of the neighboring cell to the management system.

The topology management network element converts the location information of the terminal device to obtain the identifier of the allowed access cell of the terminal device and the identifier of the neighboring cell, and sends the foregoing two types of identifiers to the management system.

1103. The management system sends the identifier of the access cell and the terminal identifier to the information providing network element.

The corresponding management system in the foregoing FIG. 8 to FIG. 11 may be an input system for performing contract signing, for example, a system for signing a staff to open a service, or other systems having similar functions, and the present application does not impose any limitation.

Similarly, as described above, the corresponding information providing network element in the foregoing FIG. 8 to FIG. 11 may be a unified data management network element or a policy control network element or an authentication network element, or may be other network elements having similar functions. This application does not impose any restrictions.

The location information described in the foregoing FIG. 8 to FIG. 11 may be any one of latitude and longitude information, administrative location information, and address information, and is also started to be other location information that can reflect the limited access range of the terminal device. This application does not impose any restrictions.

The network access method in this application is described in detail in the foregoing embodiment. The network element and the terminal device in this application are described in detail below, as follows:

As shown in FIG. 12, an embodiment of an access management apparatus in this embodiment of the present application includes:

The receiving unit 1201 is configured to receive information about an access area of the terminal device.

The obtaining unit 1202 is configured to acquire information that allows the terminal device to allow the access area;

The determining unit 1203 is configured to determine, according to the information about the terminal device access area and the information that the terminal device allows the access area to allow the terminal device to access the area, whether to allow the terminal device to access.

As shown in FIG. 13, in a possible implementation manner of the access management apparatus, the receiving unit 1301 includes:

The first receiving module 13011 is configured to receive information about a terminal device access area sent by the access network element, where the information about the terminal device access area includes: information about a current access area of the terminal device and a phase of the current access area of the terminal device. At least one of the information of the neighboring area; or;

The second receiving module 13012 is configured to receive information about a current access area of the terminal device that is sent by the access network element, and receive information about a neighboring area of the current access area of the terminal device that is sent by the topology management network element.

As shown in FIG. 13, in a possible implementation manner of the access management apparatus, the obtaining unit 1302 includes:

The sending module 13021 is configured to send a request message to the information providing network element, where the request message is used to request the permission request message to request information that allows the terminal device to allow the access area, where the information providing network element includes: a unified device management network element or policy control NE or authentication service network element.

As shown in FIG. 13, in a possible implementation manner of the access management apparatus, the determining unit 1303 includes:

The first determining module 13031 is configured to determine whether to allow the terminal device to access according to whether the information that allows the terminal device access region includes all or part of the terminal device access region information.

The second determining module 13032 is configured to determine whether to allow the terminal device to access according to whether the verification information of the terminal device access area and the verification information of the terminal device access area are matched.

As shown in FIG. 13, in a possible implementation manner of the access management device, the access management device further includes:

The first determining unit 1304 is configured to determine, during the registration process of the access management network element, that the terminal device is not allowed to access according to the information of the terminal device access region and the information of the terminal device access region, and the terminal device is refused to register or refuse. The terminal device establishes a session connection; or

The second decision unit 1305 is configured to determine, during the handover process, that the access device is not allowed to access according to the information of the access area of the terminal device and the information of the access area of the terminal device, and the access management network element rejects The terminal device performs the handover, or initiates a deregistration process to the terminal device, or initiates a session deletion process to the terminal device; or

The third decision unit 1306 is configured to determine, during the handover process, that the access device does not allow the terminal device to access according to the information of the terminal device access region and the information of the terminal device access region, and the access management network element rejects The terminal device performs handover, or initiates a deregistration process to the terminal device, or initiates a session deletion process to the terminal device.

As shown in FIG. 14, an embodiment of an access device in the embodiment of the present application includes:

The obtaining unit 1401 is configured to learn that the terminal device can only access the access area;

The sending unit 1402 is configured to send information about the access area of the terminal device to the access management network element.

As shown in FIG. 15, in a possible implementation manner of the access device, the acquiring unit 1501 includes:

The first determining module 15011 is configured to determine, according to the access restriction identifier sent by the terminal device, that the terminal device can only access the access area, or

The second determining module 15012 is configured to determine, according to the indication message sent by the access management network element, that the terminal device can only access the access area, and the indication message is used to indicate that the access network element sends the terminal to the access management network element. Information about the device access area.

As shown in FIG. 15, in a possible implementation manner of the access device, the sending unit 1502 includes:

The first sending module 15021 is configured to send information about the access area of the terminal device to the access management network element, where the information about the access area of the terminal device includes: information about the current access area of the terminal device and neighboring of the current access area of the terminal device. Regional information, or;

The second sending module 15022 is configured to send only information about the current access area of the terminal device to the access management network element.

As shown in FIG. 16, an embodiment of a terminal device in the embodiment of the present application includes:

a determining unit 1601, configured to determine that the terminal device can only access the access area;

The sending unit 1602 is configured to send, to the access network element, the indication information, where the indication information is used to indicate that the access network element sends the information about the access area of the terminal device to the access management network element.

In a possible implementation manner of the terminal device, the determining unit 1601 includes:

The first determining module 16011 is configured to determine, according to the device type of the terminal device, that the terminal device can only access the access area, or

The second determining module 16012 is configured to determine, according to the subscription information of the terminal device, that the terminal device can only access the access area.

As shown in FIG. 17, an embodiment of the information recording apparatus in the embodiment of the present application includes:

The obtaining unit 1701 is configured to acquire information that allows the terminal device to allow the access area;

The sending unit 1702 is configured to send, to the access management network element, information that allows the terminal device to access the area.

In a possible implementation manner of the access device, the obtaining unit 1701 includes: a determining module 17011, configured to determine, according to the subscription information of the terminal device, information that allows the terminal device to access the area.

In a possible implementation manner of the access device, the information recording device further includes: a receiving unit 1703, configured to receive a request message sent by the access management network element, where the request message is used by the information providing device to send the terminal device access area. Information.

The access management device, the access device, the terminal device, and the information providing network element in this application are also used to perform the foregoing method embodiments in FIG. 2 to FIG. 7 to implement the network access method in the present application, where The management device is configured to perform the operations performed by the access management network element, and the access device is configured to perform operations performed by the network element of the access network, where the information providing network element is configured to perform operations performed by the information providing network element. For a detailed description, refer to the related descriptions in FIG. 2 to FIG. 7 and the beneficial effects, which are not described herein again.

The time to be described is that the information of the terminal device access area in any one of the foregoing access management device, the access device, the information providing device, and the medium terminal device includes: an identifier of the terminal device access region, and the terminal device accesses At least one of an identifier of a neighboring area of the area and verification information of the terminal equipment access area.

The information for allowing the terminal device to access the area includes at least one of an identifier that allows the terminal device to access the area and authentication information that allows the terminal device to access the area.

The identifier of the access area of the terminal device includes: an identifier of the access cell, an identifier of the access network device, an interface line identifier, a virtual local area network identifier, and a port identifier; and the identifier of the adjacent area of the terminal equipment access area includes: The identity of the neighboring cell accessing the cell or the identity of the neighboring access network device of the access network device.

As shown in FIG. 18, the embodiment of the present application further provides a communication device 18. The communication device 18 includes a storage component 1801 and a processing component 1802. The storage component 1801 is used to store computer operation instructions. The processing component 1802 is operated by calling the above computer. The instruction performs the operations performed by the access management network element, the access network element, the information providing network element, and the terminal device in the foregoing network access method in the foregoing FIG. 2 to FIG. The above storage element 1801 includes a memory or a chip having a storage function. Moreover, the memory may be a read-only memory (ROM) or other type of static storage device that can store static information and instructions, a random access memory (RAM) or other information that can store information and instructions. Type of dynamic storage device, also can be electrically erasable programmable read-only memory (EEPROM), compact disc read-only memory (CD-ROM) or other optical disc storage, optical disc Storage (including compact discs, laser discs, optical discs, digital versatile discs, Blu-ray discs, etc.), magnetic disk storage media or other magnetic storage devices, or can be used to carry or store desired program code in the form of instructions or data structures and can be Any other medium accessed by the computer, but is not limited to this. The memory can exist independently and be connected to the processor via a bus. The memory can also be integrated with the processor.

The processing element 1802 described above includes a processor or a chip having processing capabilities. The processor may be a general purpose central processing unit (CPU), a microprocessor, an application-specific integrated circuit (ASIC), or one or more integrated systems for controlling the execution of the program of the present application. Circuit.

The communication device 18 may further include a communication interface and a communication line, wherein the communication interface is used to establish a network connection with other devices, and the communication line is a path for transmitting information between the memory, the processor and the communication interface to implement the present application. The method of network access as described in any of FIG.

In a specific implementation, as an embodiment, the communication device may further include an output device and an input device. The output device communicates with the processor and can display information in a variety of ways. For example, the output device may be a liquid crystal display (LCD), a light emitting diode (LED) display device, a cathode ray tube (CRT) display device, or a projector. . The input device communicates with the processor and can receive user input in a variety of ways. For example, the input device can be a mouse, a keyboard, a touch screen device, or a sensing device, and the like.

The above communication device can be a general purpose device or a dedicated device. In a specific implementation, the communication device may be a desktop computer, a portable computer, a network server, a personal digital assistant (PDA), a mobile phone, a tablet computer, a wireless terminal device, an embedded device, or a device having a similar structure in FIG. . The embodiment of the present application does not limit the type of communication device.

The embodiment of the present application further provides a computer storage medium for storing computer operation instructions, when the computer operation instruction is run on a computer, causing the computer to execute the foregoing access management network element and the information providing network. A method of network access according to any one of the element, the access network element, and the terminal device. Specifically, it may be the corresponding memory chip or memory in FIG. 16 described above.

The embodiment of the present application further provides a computer program product, which when executed on a computer, enables the computer to perform the access management network element, the access network element, the information providing network element, and the terminal in FIG. 2 to FIG. 7 above. The operation performed by any one of the devices in the above network access method.

A person skilled in the art can clearly understand that for the convenience and brevity of the description, the specific working process of the system, the device and the unit described above can refer to the corresponding process in the foregoing method embodiment, and details are not described herein again.

In the several embodiments provided by the present application, it should be understood that the disclosed system, apparatus, and method may be implemented in other manners. For example, the device embodiments described above are merely illustrative. For example, the division of the unit is only a logical function division. In actual implementation, there may be another division manner, for example, multiple units or components may be combined or Can be integrated into another system, or some features can be ignored or not executed. In addition, the mutual coupling or direct coupling or communication connection shown or discussed may be an indirect coupling or communication connection through some interface, device or unit, and may be in an electrical, mechanical or other form.

The units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, may be located in one place, or may be distributed to multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of the embodiment.

In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above integrated unit can be implemented in the form of hardware or in the form of a software functional unit.

The integrated unit, if implemented in the form of a software functional unit and sold or used as a standalone product, may be stored in a computer readable storage medium. Based on such understanding, the technical solution of the present application, in essence or the contribution to the prior art, or all or part of the technical solution may be embodied in the form of a software product stored in a storage medium. A number of instructions are included to cause a computer device (which may be a personal computer, server, or network device, etc.) to perform all or part of the steps of the methods described in various embodiments of the present application. The foregoing storage medium includes: a U disk, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk, or an optical disk, and the like, which can store program code. .

The above embodiments are only used to explain the technical solutions of the present application, and are not limited thereto; although the present application has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that they can still The technical solutions described in the embodiments are modified, or some of the technical features are equivalently replaced; and the modifications or substitutions do not deviate from the technical solutions of the embodiments of the present application.

Claims

A method for network access, characterized in that it comprises:

The access management network element receives information about the access area of the terminal device;

The access management network element acquires information that allows the terminal device to access the area;

And determining, by the access management network element, whether the terminal device is allowed to access according to the information about the access area of the terminal device and the information of the access area of the terminal device.
The method according to claim 1, wherein the information of the terminal device access area comprises: an identifier of the terminal device access area, an identifier of the adjacent area of the terminal device access area, and the At least one of the verification information of the terminal device access area.
The method according to claim 1, wherein the information for allowing the terminal device to access an area comprises: allowing an identifier of the terminal device to access an area and verifying information for allowing the terminal device to access the area At least one of them.
The method according to claim 2 or 3, wherein the identifier of the access area of the terminal device comprises: an identifier of the access cell, an identifier of the access network device, an interface line identifier, a virtual local area network identifier, and a port identifier. Any one of the identifiers of the neighboring areas of the access area of the terminal device: the identifier of the neighboring cell of the access cell or the identifier of the neighboring access network device of the access network device.
The method according to any one of claims 1 to 4, wherein the access management network element receives the information of the access area of the terminal device, including:

The access management network element receives the information about the access area of the terminal device that is sent by the access network element, where the information about the access area of the terminal device includes: information about the current access area of the terminal device, and the terminal At least one of information about an adjacent area of the current access area of the device; or

The access management network element receives the information about the current access area of the terminal device that is sent by the access network element; the access management network element receives the current access area of the terminal device that is sent by the topology management network element Information about adjacent areas.
The method according to any one of claims 1 to 5, wherein the access management network element acquires the information that allows the access area of the terminal device, including:

The access management network element sends a request message to the information providing network element, where the request message is used to request the information that the terminal device is allowed to access the area, where the information providing network element includes: a unified device management network element or The policy controls the network element or the authentication service network element.
The method according to any one of claims 1 to 6, wherein the access management network element determines, according to the information of the access area of the terminal device and the information of the access area of the terminal device. Whether the terminal device is allowed to access, including:

The access management network element determines whether to allow the terminal device to access according to whether the information of the terminal device access area includes all or part of the terminal device access area information.
The method according to any one of claims 1 to 7, wherein the access management network element determines, according to the information of the access area of the terminal device and the information of the access area of the terminal device. Whether the terminal device is allowed to access, including:

And determining, by the access management network element, whether the terminal device is allowed to access according to whether the verification information of the access area of the terminal device matches the verification information of the access area of the terminal device.
The method according to any one of claims 1 to 8, wherein the method further comprises:

In the registration process, the access management network element determines, according to the information about the access area of the terminal device and the information about the access area of the terminal device, that the terminal device is not allowed to access, and the access is The management network element rejects the terminal device registration or denies the terminal device to establish a session connection, or

The access management network element determines, according to the information about the access area of the terminal device and the information of the access area of the terminal device, that the terminal device is not allowed to access, in the handover process, the access The management network element rejects the terminal device to perform the handover, or initiates a deregistration process to the terminal device, or initiates a session deletion process to the terminal device; or

During the session establishment process, the access management network element determines, according to the information about the access area of the terminal device and the information about the access area of the terminal device, that the terminal device is not allowed to access, The ingress management network element rejects the terminal device to establish a session connection, or initiates a deregistration process to the terminal device, or initiates a session deletion process to the terminal device.
A method for network access, characterized in that it comprises:

The access network element learns that the terminal device can only access the access area;

The access network element sends the information about the access area of the terminal device to the access management network element.
The method according to claim 10, wherein the access network element learns that the terminal device can only access the access area, including:

The access network element determines, according to the access restriction identifier sent by the terminal device, that the terminal device can only access the access area, or

The access network network element determines, according to the indication message sent by the access management network element, that the terminal device can only access in the allowed access area, and the indication message is used to indicate the access network element Sending information about the access area of the terminal device to the access management network element.
The method according to claim 10 or 11, wherein the information about the access area of the terminal device is sent by the network element of the access network to the access management network element, including:

The access network element sends the information about the access area of the terminal device to the access management network element, where the information about the access area of the terminal device includes: information about the current access area of the terminal device, and the Information about the adjacent area of the current access area of the terminal device, or

The access network element sends only the information about the current access area of the terminal device to the access management network element.
The method according to any one of claims 10 to 12, wherein the information of the terminal device access area comprises: an identifier of the terminal device access area, and the terminal device access area is adjacent to the area At least one of an identifier of the area and verification information of the access area of the terminal device.
The method according to claim 13, wherein the identifier of the access area of the terminal device comprises: an identifier of the access cell, an identifier of the access network device, an interface line identifier, a virtual local area network identifier, and a port identifier. The identifier of the neighboring area of the access area of the terminal device includes: an identifier of a neighboring cell of the access cell or an identifier of a neighboring access network device of the access network device.
An access management device, comprising:

a receiving unit, configured to receive information about an access area of the terminal device;

An obtaining unit, configured to acquire information about the access area of the terminal device;

And a determining unit, configured to determine, according to the information about the terminal device access area and the information that allows the terminal device to access the area, whether to allow the terminal device to access.
The device according to claim 15, wherein the information about the access area of the terminal device comprises: an identifier of the access area of the terminal device, an identifier of the adjacent area of the access area of the terminal device, and the At least one of the verification information of the terminal device access area.
The device according to claim 15, wherein the information for allowing the terminal device to access an area comprises: allowing an identifier of the terminal device to access an area and verifying information that the terminal device is allowed to access the area At least one of them.
The device according to claim 16 or 17, wherein the identifier of the access area of the terminal device comprises: an identifier of the access cell, an identifier of the access network device, an interface line identifier, a virtual local area network identifier, and a port identifier. Any one of the identifiers of the neighboring areas of the access area of the terminal device: the identifier of the neighboring cell of the access cell or the identifier of the neighboring access network device of the access network device.
The apparatus according to any one of claims 15 to 18, wherein the receiving unit comprises:

a first receiving module, configured to receive information about an access area of the terminal device that is sent by an access network element, where the information about the access area of the terminal device includes: information about a current access area of the terminal device, and the terminal At least one of information about an adjacent area of the current access area of the device; or

a second receiving module, configured to receive information about a current access area of the terminal device that is sent by the network element of the access network, and receive the neighboring information of the current access area of the terminal device that is sent by the topology management network element Regional information.
The device according to any one of claims 15 to 19, wherein the obtaining unit comprises:

a sending module, configured to send a request message to the information providing network element, where the request message is used to request the requesting the request message to request the information about allowing the terminal device to access an area, where the information provides a network element Including: unified device management network element or policy control network element or authentication service network element.
The apparatus according to any one of claims 15 to 20, wherein the determining unit comprises:

And a first determining module, configured to determine, according to whether the information that allows the terminal device access area includes all or part of the terminal device access area information, whether to allow the terminal device to access.
The apparatus according to any one of claims 15 to 21, wherein the determining unit further comprises:

And a second determining module, configured to determine, according to whether the verification information of the access area of the terminal device matches the verification information of the access area of the terminal device, whether the terminal device is allowed to access.
The device according to any one of claims 15 to 22, wherein the device further comprises:

a first determining unit, configured to determine, when the access management network element is in the registration process, that the terminal device is not allowed according to the information about the access area of the terminal device and the information that allows the access area of the terminal device Accessing, denying the terminal device registration or denying the terminal device to establish a session connection; or

a second determining network element, configured to determine, according to the information about the access area of the terminal device and the information of the access area of the terminal device, that the access management network element does not allow the terminal during the handover process The device accesses, the access management network element rejects the terminal device to perform the handover, or initiates a deregistration process to the terminal device, or initiates a session deletion process to the terminal device; or

a third determining network element, configured to determine, according to the information about the access area of the terminal device and the information of the access area of the terminal device, that the access management network element does not allow the terminal during the handover process The device accesses, the access management network element rejects the terminal device to perform the handover, or initiates a deregistration process to the terminal device, or initiates a session deletion process to the terminal device.
An access device, comprising:

An obtaining unit, configured to learn that the terminal device can only access the access area;

And a sending unit, configured to send information about the access area of the terminal device to the access management network element.
The device according to claim 24, wherein the obtaining unit comprises:

a first determining module, configured to determine, according to the access restriction identifier sent by the terminal device, that the terminal device can only access the access area, or

a second determining module, configured to determine, according to the indication message sent by the access management network element, that the terminal device can only access in the allowed access area, where the indication message is used to indicate that the access device accesses the access The management network element sends information about the access area of the terminal device.
The apparatus according to claim 24 or 25, wherein the transmitting unit comprises:

a first sending module, configured to send information about the access area of the terminal device to the access management network element, where the information about the access area of the terminal device includes: information about the current access area of the terminal device, and the Information about the adjacent area of the current access area of the terminal device, or

And a second sending module, configured to send, to the access management network element, only information about a current access area of the terminal device.
The device according to any one of claims 24 to 26, wherein the information of the terminal device access area comprises: an identifier of the terminal device access area, and the terminal device access area is adjacent to the area At least one of an identifier of the area and verification information of the access area of the terminal device.
The device according to claim 27, wherein the identifier of the access area of the terminal device comprises: an identifier of an access cell, an identifier of an access network device, an interface line identifier, a virtual local area network identifier, and a port identifier. The identifier of the neighboring area of the access area of the terminal device includes: an identifier of a neighboring cell of the access cell or an identifier of a nearby access network device of the access network device.
A communication device, comprising:

a storage element and a processing element; the storage element being for storing a computer operating instruction;

The processing element is operative to perform the method of network access according to any one of the preceding claims 1 to 14, by invoking the computer operating instructions.
A computer storage medium for storing computer operating instructions for causing a computer to perform the network of any one of claims 1 to 14 when the computer operating instructions are run on a computer Access method.